#include <sys/syscall.h>
//此文件为沙盒的白名单和黑名单机制

//白名单机制
//system call table at /usr/include/x86_64-linux-gnu/asm/unistd_64.h中
//SYS_XXX format call name at /usr/include/x86_64-linux-gnu/bits/syscall.h
int WHITE_LIST_CPP[] = {
    SYS_read, SYS_write, SYS_stat, SYS_fstat, SYS_mmap, SYS_munmap, SYS_brk, SYS_access,
    SYS_readlink, SYS_arch_prctl, SYS_exit_group, SYS_mq_open,
    SYS_time, SYS_uname, SYS_lseek, SYS_close, SYS_mprotect,
    SYS_set_thread_area, SYS_ioprio_get, -1
};
//编译黑名单机制
int BLACK_LIST_COMPILE[] = {
    SYS_setpgid, SYS_seccomp,
    -1
};

int BLACK_LIST_GENERAL[] = {
    SYS_vfork, SYS_fork, SYS_execveat, SYS_kill,
    //SYS_clone,
    SYS_setpgid, //SYS_setrlimit,
    SYS_seccomp
    -1
};
